CVE-2026-19775: Missing Authorization

The OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible f...

CVE-2026-97732: Improper Verification of Cryptographic Signature

IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WINCERTIFICATE data "IRONMACE Co., Ltd." and "DigiCert Trusted Root G4" instead of parsing and validating the PKCS signature data...

EXOS < 31.7.4 / 32.0.0 < 32.7.4.15 / 33.0.0 < 33.1.100, 33.7.0 < 33.7.1 Privilege Escalation (SA-2026-087)

The version of EXOS installed on the remote host is missing a security update. It is, therefore, affected by an privilege escalation vulnerability. - ExtremeXOS uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value can be predicted unde...

PT-2026-99064

Name of the Vulnerable Software and Affected Versions GLPI versions 0.72 through 10.0.25 GLPI versions 11.0.0 through 11.0.7 Description An authenticated user without the necessary permissions can enable debug mode because the user-setting update process fails to enforce the privilege boundary...

EUVD-2026-87080

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

PT-2026-98349

Name of the Vulnerable Software and Affected Versions IRONMACE Ironshield version 1.0.0.167 Description The tvk.sys kernel-mode driver authenticates client executables by verifying expected publisher and root-certificate strings within the WIN CERTIFICATE data, specifically checking for "IRONMACE...

Linux Distros Unpatched Vulnerability : CVE-2026-98074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bonding: do not clear curractiveslave prematurely when releasing all slaves When releasing all slaves during bond destruction all == true, bondreleaseone...

Linux Distros Unpatched Vulnerability : CVE-2026-98143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPUSETIFM,OFMPRECISION select the activation storage mode on U85 only. On U65 th...

CVE-2026-98143: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as a storage mode Bits 15:14 of NPUSETIFM,OFMPRECISION select the activation storage mode on U85 only. On U65 the same field holds the rounding mode, and the command stream parser h...

PT-2026-98363

Name of the Vulnerable Software and Affected Versions OpenStation — Desktop Windows, Dock & Virtual Desktops for WP Admin versions prior to 1.1.8 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticat...

CVE-2026-79153: Improper Privilege Management

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

CVE-2026-98074: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bonding: do not clear curractiveslave prematurely when releasing all slaves When releasing all slaves during bond destruction all == true, bondreleaseone unconditionally clears bond-curractiveslave to NULL in every iteration. If ...

CVE-2026-45801: Improper Privilege Management

GLPI is a free asset and IT management software package. From 0.72 until 10.0.26 and 11.0.8, an authenticated user without the required permission can enable debug mode. The affected user-setting update does not enforce the privilege boundary intended to restrict debug-mode activation. This issue...

PT-2026-98495

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overflow exists in the SMB client when rewriting a Discretionary Access Control List DACL. The issue occurs in the id mode to cifs acl function, which allocates a buffer based on...

PT-2026-98737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bonding module where the curr active slave is cleared prematurely during the release of all slaves during bond destruction. When a backup slave is released before...

PT-2026-98805

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethosu accelerator driver where the command stream parser incorrectly interprets bits 15:14 of NPU SET IFM,OFM PRECISION as an activation storage mode on U65...

Linux Distros Unpatched Vulnerability : CVE-2026-93234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed-size GUDCONNECTORTVMODENAMELEN entries and require...

openSUSE 16 Security Update : gnome-remote-desktop (openSUSE-SU-2026:21888-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21888-1 advisory. This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow...

CVE-2026-79153

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

PT-2026-98838

Name of the Vulnerable Software and Affected Versions Seclore FileSecure Desktop Client versions prior to 3.25.1.0 Description An improper access control issue exists in the kernel-mode driver component. This allows an authenticated local user to elevate their privileges to NT AUTHORITYSYSTEM,...